CVEvulnerability
CVE-2017-6229
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-02-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.
Affected configurations
• ruckuswireless r500 firmware (< 200.6.10.1.0)
• ruckuswireless r600 firmware (< 200.6.10.1.0)
• ruckuswireless r310 firmware (< 200.6.10.1.0)
• ruckuswireless h320 firmware (< 200.6.10.1.0)
• ruckuswireless h510 firmware (< 200.6.10.1.0)
• ruckuswireless r710 firmware (< 200.6.10.1.0)
• ruckuswireless r720 firmware (< 200.6.10.1.0)
• ruckuswireless t300 firmware (< 200.6.10.1.0)
• ruckuswireless t301 firmware (< 200.6.10.1.0)
• ruckuswireless t300e firmware (< 200.6.10.1.0)
• ruckuswireless t610 firmware (< 200.6.10.1.0)
• ruckuswireless t710 firmware (< 200.6.10.1.0)
• ruckuswireless r510 firmware (< 200.6.10.1.0)
• ruckuswireless zonedirector 1200 firmware (>= 9.10.2.0.11 <= 9.10.2.0.53)
• ruckuswireless zonedirector 1200 firmware (>= 9.12.3.0.28 <= 9.12.3.0.83)
• ruckuswireless zonedirector 1200 firmware (>= 9.13.3.0.22 <= 9.13.3.0.145)
• ruckuswireless zonedirector 1200 firmware (>= 10.0.1.0.17 <= 10.0.1.0.44)
• ruckuswireless zonedirector 1200 firmware 10.1.0.0.1515
• ruckuswireless zonedirector 3000 firmware (>= 9.10.2.0.11 <= 9.10.2.0.53)
• ruckuswireless zonedirector 3000 firmware (>= 9.12.3.0.28 <= 9.12.3.0.83)
• ruckuswireless zonedirector 3000 firmware (>= 9.13.3.0.22 <= 9.13.3.0.145)
• ruckuswireless zonedirector 3000 firmware (>= 10.0.1.0.17 <= 10.0.1.0.44)
• ruckuswireless zonedirector 3000 firmware 10.1.0.0.1515
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness